Use a long, unique password or passphrase.

Do not reuse your company password on personal websites.

Use an approved password manager where available and enable MFA.

Never send passwords through email, WhatsApp or support tickets.